Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: OT1XVMoAlizpR41RX8W6cqp0r2CrDY212p/zLL0E9Tw=
Subject key identifier: E3:EE:D3:B8:F7:FB:3F:9D:6D:9C:63:ED:4B:57:3E:48:09:F0:48:F9
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 0197B6A183C0E5D280A5A6EEB1D797385E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:02:07 +0000
Manifest this update: Sat 28 Jun 2025 13:02:07 +0000
Manifest next update: Sun 29 Jun 2025 13:02:07 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: k/lJ51HpNlyVHy/5549CzTy9cqc/e2Zfpw107Hdx8jo=)
2: NQNN2zI--5W9phAw1FPsrLGEYwA.roa (hash: vTr80Rx2MWq5UoQZbNWzT5PuHgBwID0hr0ao7hRy9dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:83:c0:e5:d2:80:a5:a6:ee:b1:d7:97:38:5e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Jun 28 13:02:07 2025 GMT
Not After : Jun 29 13:02:07 2025 GMT
Subject: CN=e3eed3b8f7fb3f9d6d9c63ed4b573e4809f048f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:61:4d:cf:fb:c2:0a:0f:a3:8c:bf:01:f7:
fe:4b:e7:a3:cb:09:18:56:3c:aa:0f:22:9e:1f:3b:
c2:24:17:30:ad:75:ce:14:b3:71:b3:eb:32:9b:65:
96:72:b7:77:81:af:e9:f8:0f:bb:0d:41:44:c6:05:
73:2c:2c:88:2d:a6:c8:b8:86:1d:dc:4f:6b:72:6c:
72:6b:4a:09:b7:cf:d9:11:a4:5d:87:26:83:b2:95:
31:d3:72:af:14:29:cf:62:85:c5:47:4a:6b:e2:cc:
fc:9e:90:82:e6:fc:90:4f:86:58:c7:74:bb:35:e6:
5a:89:27:3d:13:ca:3d:37:d3:8a:91:37:b8:8e:a8:
a6:8d:d0:95:69:2e:f4:53:43:9f:e6:33:3d:b7:a0:
2a:bf:d1:f7:88:95:7e:a5:4e:6f:8b:3d:e5:c3:99:
29:e6:ea:60:4d:d6:9b:d4:12:37:db:c7:40:a6:3d:
89:42:77:c9:f2:ed:95:63:fc:8a:3f:72:5d:75:12:
16:90:3c:c7:32:11:3c:1e:fc:5a:32:f6:bc:d5:5f:
a5:8b:50:66:64:b1:0a:01:4b:36:d0:b5:67:8e:fd:
bc:91:cb:77:43:c4:15:4e:cd:17:cf:c6:e8:3f:a2:
08:53:e0:98:23:c3:d2:89:37:48:c1:6a:af:6c:d9:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EE:D3:B8:F7:FB:3F:9D:6D:9C:63:ED:4B:57:3E:48:09:F0:48:F9
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2a:9d:db:b9:33:9e:f2:11:c5:35:65:74:76:5d:b1:0d:82:
f3:71:84:af:8f:1d:a6:36:81:0c:a3:a3:1b:5d:43:1e:a6:a4:
a6:52:dd:83:79:6d:ea:c0:e2:bc:11:fe:ab:bd:cb:90:95:72:
99:0e:28:46:38:42:9b:9d:7d:c6:0f:95:3a:30:02:08:49:0d:
4d:86:d8:13:7f:10:50:b5:f0:7b:71:09:a1:f8:11:a0:12:8c:
4b:d1:58:a5:b7:a1:dc:ab:dc:6f:22:9c:89:f2:d8:03:ff:bc:
cd:99:f3:86:e2:90:43:7c:7f:9b:90:7d:5a:b9:0c:4f:32:c3:
7a:00:cb:ef:9f:00:be:a2:56:97:f0:b2:af:24:79:4f:ab:73:
ec:9a:f5:22:7b:f7:3e:1b:64:42:4b:50:21:f3:29:90:cf:79:
7c:10:7a:16:8f:01:bd:78:37:ab:67:9f:89:6f:6b:1c:3f:00:
15:39:b5:eb:46:9f:7f:6a:87:eb:53:78:55:77:1a:b7:6d:b8:
37:8b:df:09:ba:f6:c3:60:bd:35:6d:8e:30:49:f2:58:c9:8a:
36:df:58:04:b5:ba:8f:f6:02:16:23:fb:2f:ad:1e:40:f1:7e:
f6:a4:f9:a5:25:61:11:c3:b9:df:3a:ec:a4:39:ca:e3:48:e0:
bd:82:86:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYPA5dKApabusdeXOF6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDkwZmJhNjYzYjA3MmJiNTRjYzdkNDllODhhMDM4MDM3
NGNiNmUwHhcNMjUwNjI4MTMwMjA3WhcNMjUwNjI5MTMwMjA3WjAzMTEwLwYDVQQD
EyhlM2VlZDNiOGY3ZmIzZjlkNmQ5YzYzZWQ0YjU3M2U0ODA5ZjA0OGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte1hTc/7wgoPo4y/Aff+S+ejywkY
VjyqDyKeHzvCJBcwrXXOFLNxs+sym2WWcrd3ga/p+A+7DUFExgVzLCyILabIuIYd
3E9rcmxya0oJt8/ZEaRdhyaDspUx03KvFCnPYoXFR0pr4sz8npCC5vyQT4ZYx3S7
NeZaiSc9E8o9N9OKkTe4jqimjdCVaS70U0Of5jM9t6Aqv9H3iJV+pU5viz3lw5kp
5upgTdab1BI328dApj2JQnfJ8u2VY/yKP3JddRIWkDzHMhE8HvxaMva81V+li1Bm
ZLEKAUs20LVnjv28kct3Q8QVTs0Xz8boP6IIU+CYI8PSiTdIwWqvbNnB0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPu07j3+z+dbZxj7UtXPkgJ8Ej5MB8GA1UdIwQY
MBaAFAcJD7pmOwcrtUzH1J6IoDgDdMtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzct
MDFhMjhhNzZjY2Y0LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzctMDFhMjhhNzZjY2Y0
LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCqd27kz
nvIRxTVldHZdsQ2C83GEr48dpjaBDKOjG11DHqakplLdg3lt6sDivBH+q73LkJVy
mQ4oRjhCm519xg+VOjACCEkNTYbYE38QULXwe3EJofgRoBKMS9FYpbeh3KvcbyKc
ifLYA/+8zZnzhuKQQ3x/m5B9WrkMTzLDegDL758AvqJWl/CyryR5T6tz7Jr1Inv3
PhtkQktQIfMpkM95fBB6Fo8BvXg3q2efiW9rHD8AFTm160aff2qH61N4VXcat224
N4vfCbr2w2C9NW2OMEnyWMmKNt9YBLW6j/YCFiP7L60eQPF+9qT5pSVhEcO53zrs
pDnK40jgvYKGmw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:03 2025 by rpki-client